İçeriğe atla
Noroxi

CWE-73 · 656 kayıt

External Control of File Name or Path

Bu sınıftaki CVE’ler

656 kayıt

  • CVE-2025-33053
    91Hemen

    Internet Shortcut Files Remote Code Execution Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %87

    microsoft · windows 10 150710 Haz 2025

  • CVE-2024-43451
    81Hemen

    NTLM Hash Disclosure Spoofing Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %84

    microsoft · windows 10 150712 Kas 2024

  • CVE-2025-24054
    70Bu hafta

    NTLM Hash Disclosure Spoofing Vulnerability

    OrtaCVSS 5,4KEVSilahlaştırılmışEPSS %62

    microsoft · windows 10 150711 Mar 2025

  • CVE-2026-96656
    70Bu hafta

    Plex Media Server arbitrary file write

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %19

    plex · media server23 Eyl 2026

  • CVE-2022-39952
    69Bu hafta

    A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11,

    KritikCVSS 9,8SilahlaştırılmışEPSS %99

    fortinet · fortinac16 Şub 2023

  • CVE-2024-8517
    67Bu hafta

    SPIP Bigup Multipart File Upload OS Command Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %94

    spip · spip6 Eyl 2024

  • CVE-2023-4634
    65Bu hafta

    Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %85

    davidlingren · media library assistant6 Eyl 2023

  • CVE-2018-17246
    64Bu hafta

    Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin.

    KritikCVSS 9,8Kavram kanıtıEPSS %84

    elastic · kibana20 Ara 2018

  • CVE-2023-3643
    62Bu hafta

    Boss Mini document file inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %75

    carel · boss mini firmware12 Tem 2023

  • CVE-2025-0111
    59Planlayın

    PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

    YüksekCVSS 7,1KEVSilahlaştırılmışEPSS %1

    paloaltonetworks · pan-os12 Şub 2025

  • CVE-2021-27250
    46Planlayın

    This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc0

    OrtaCVSS 6,5İstismar yokEPSS %67

    dlink · dap-2020 firmware14 Nis 2021

  • CVE-2021-21343
    44Planlayın

    XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

    YüksekCVSS 7,5İstismar yokEPSS %46

    xstream · xstream23 Mar 2021

  • CVE-2024-37149
    41Planlayın

    GLPI allows remote code execution through the plugin loader

    YüksekCVSS 8,8İstismar yokEPSS %21

    glpi-project · glpi10 Tem 2024

  • CVE-2024-0265
    41Planlayın

    SourceCodester Clinic Queuing System GET Parameter index.php file inclusion

    YüksekCVSS 8,8İstismar yokEPSS %20

    oretnom23 · clinic queuing system7 Oca 2024

  • CVE-2024-0087
    41Planlayın

    NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file.

    YüksekCVSS 8,8İstismar yokEPSS %19

    nvidia · triton inference server14 May 2024

  • CVE-2025-6463
    40Planlayın

    Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submiss

    YüksekCVSS 8,8İstismar yokEPSS %15

    incsub · forminator2 Tem 2025

  • CVE-2026-90817
    40Planlayın

    An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in whic

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    vanderbilt university · redcap20 Eyl 2026

  • CVE-2025-71338
    40Planlayın

    Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    flowiseai · flowise25 Haz 2026

  • CVE-2025-54945
    40Planlayın

    SUNNET Corporate Training Management System - External Control of File Name or Path

    KritikCVSS 10,0İstismar yokEPSS %0

    sun.net · ehrd ctms30 Ağu 2025

  • CVE-2011-10030
    40Planlayın

    Foxit PDF Reader < 4.3.1.0218 JavaScript File Write

    YüksekCVSS 8,4SilahlaştırılmışEPSS %0

    foxit software · foxit pdf reader20 Ağu 2025

  • CVE-2026-20358
    40Planlayın

    Cisco Crosswork Security Hardening Release: August 2026

    KritikCVSS 10,0İstismar yokEPSS %0

    cisco · cisco crosswork planning19 Ağu 2026

  • CVE-2026-107594
    40Planlayın

    File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion

    KritikCVSS 10,0İstismar yokEPSS %0

    unknown · file upload to order14 Eki 2026

  • CVE-2026-101148
    40Planlayın

    BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key

    KritikCVSS 10,0İstismar yokEPSS %0

    unknown · backupsheep wordpress backup plugin1 Eki 2026

  • CVE-2026-124822
    40Planlayın

    Easy DragDrop File Uploader < 1.1.10 - Unauthenticated Arbitrary File Deletion via Path Traversal

    KritikCVSS 10,0İstismar yokEPSS %0

    unknown · easy dragdrop file uploader2 gün önce

  • CVE-2026-44127
    39İzleyin

    Local File Inclusion (LFI) and Arbitrary File Deletion

    YüksekCVSS 8,8İstismar yokEPSS %14

    seppmail ag · secure email gateway8 May 2026

Tüm zafiyet sınıfları